Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: YUInimOH7NtL6zIgWPAJrJHCdP2zg2abzAGr2LQCRjw=
Subject key identifier: 80:99:21:4B:B2:C1:F2:B0:06:4A:2E:94:32:E2:A9:3F:03:E3:BB:88
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 01974C9FE1F8AC29E5D3830BFAF76C0074A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 23:00:35 +0000
Manifest this update: Sat 07 Jun 2025 23:00:35 +0000
Manifest next update: Sun 08 Jun 2025 23:00:35 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: mL84I3GW3KEwdlvbOj7OQ4cHTo+EbdvK6VpVTP/oJUk=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:e1:f8:ac:29:e5:d3:83:0b:fa:f7:6c:00:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Jun 7 23:00:35 2025 GMT
Not After : Jun 8 23:00:35 2025 GMT
Subject: CN=8099214bb2c1f2b0064a2e9432e2a93f03e3bb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:93:d0:06:c0:97:7a:cc:30:b5:6a:7b:1a:
9b:99:d4:cd:4b:81:af:21:b4:3d:63:50:32:d0:93:
78:5c:67:24:55:0f:6e:d1:4d:e1:4b:85:46:89:a8:
9c:39:74:9d:d6:02:88:70:d1:79:16:98:e7:ba:cf:
fa:98:10:2d:69:0c:62:1e:9d:1a:4d:ed:9b:49:e3:
8c:12:b8:08:d4:71:7d:1b:57:c6:ee:49:d2:b5:c5:
9a:75:cb:94:c9:86:e0:dc:f0:1e:c9:0d:24:e2:5b:
a6:0c:23:bb:89:1e:f2:30:7a:16:0a:91:28:4a:47:
34:98:40:0a:5c:52:c7:e1:73:de:a6:5e:93:06:d6:
c6:81:1d:ca:24:f9:f2:87:8d:7a:68:1c:a2:04:63:
dc:56:a1:70:e9:5d:df:7c:a5:84:2f:fc:00:2a:d6:
0b:07:7e:d3:1a:be:f7:5e:22:8b:3a:57:00:68:ba:
dd:f0:a6:95:9f:bc:8d:ff:96:6f:9b:b9:14:78:93:
b4:3e:ab:01:29:82:47:c3:7b:f3:5f:cb:6b:9f:37:
bd:e6:1e:fb:02:56:c5:03:27:f6:59:02:71:c4:18:
ef:4f:7f:5b:0e:ad:52:9c:b2:02:86:07:0b:6c:35:
b0:3c:a3:d4:37:43:24:4e:1c:10:4d:af:c8:0b:61:
d4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:99:21:4B:B2:C1:F2:B0:06:4A:2E:94:32:E2:A9:3F:03:E3:BB:88
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a0:7e:6a:85:72:bd:6e:e2:64:9e:c2:5c:5f:60:04:54:20:
c7:fe:f5:61:bd:97:2c:ab:df:27:c7:51:27:cc:6f:7e:68:15:
28:0a:70:c0:0f:2a:51:99:3d:ce:e9:a9:d5:26:49:1f:fd:1d:
bf:99:7d:2d:74:8b:58:97:e4:85:2f:d9:cb:68:9b:37:01:1d:
8b:21:59:6d:47:af:3d:91:d6:35:65:0e:d4:0b:4f:5c:5c:fe:
57:70:c8:f8:92:90:54:cf:80:73:ba:a9:0d:ed:1e:26:e6:4f:
c6:21:5b:ee:7f:69:51:84:0b:a7:bb:e6:61:23:51:51:06:c8:
3a:a7:ad:30:b5:b3:bd:85:62:d9:ef:35:0e:f3:06:2e:72:53:
a3:ae:e3:72:54:06:d1:bb:29:20:24:81:b2:1f:0e:80:9c:93:
cc:4b:9f:78:5c:55:4f:f0:24:2c:01:80:47:13:62:71:22:de:
9a:4d:87:6a:f9:f9:b5:db:de:df:b8:7a:3f:0e:4a:38:82:29:
6f:f7:0a:62:39:3c:8a:86:a5:a5:7a:ad:31:cd:e4:2c:13:0c:
59:0a:9b:39:48:5a:b8:c8:71:b5:ee:a7:24:a4:0c:44:9d:b3:
05:bb:da:56:92:82:1c:cd:79:0c:64:dc:34:e3:2c:e6:2d:1d:
a6:b5:fc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:10:20 2025 by rpki-client